Authorization vs. Authentication

-
I was asked the following question today about MOSS: Can MOSS manage passwords? Can I store service account passwords someway in MOSS securely?

Here is an important point about MOSS security:

MOSS does not provide authentication, it only provides authorization. (very important distinction) It relys on either Active Directory or forms authentication to validate passwords. Once AD says yup this person is who they say they are, then Sharepoint takes over. Nowhere in the sharepoint databases will you find a user's password. What you will find in the sharepoint databases is the roles and permissions that a user has.

-Joseph

Comments

Anmol said…
This is really a good difference regarding SharePoint security..
Thanks a lot for sharing such great information....

Regards,
Amol Ghuge
9:26 AM
Post a Comment

Popular posts from this blog

RAM Disks do not speed up Visual Studio

-
  The limiting factor for Visual Studio is disk IO. I got a tip to speed up Visual Studio from Channel 9 by creating a RAM disk which sounded like a great idea. However, when I ran a thorough set of tests, I found that the performance difference between the Ram disk and the hard disk were not appreciably different. This was a big surprise since RAM is 240,000 times faster than disk (see my previous blog post). But the reason is because Visual Studio and Vista do a lot of caching. So compile times for the same project in RAM disk and on hard disk were pretty similar. I also tested the time it took to search the entire solution for a word, and times to open a solution. There was no discernable difference!   If you still want to try it out and create your own RAM disk, you can download a simple RAMDISK.EXE utility to create a RAM disk in just a few minutes. What is a RAM Disk ?   Ramdisk is a virtual drive created in RAM.   Performance Analysis Creating files was an average
Read more

How to Create and Run Tableau Bridge on Linux Containers

-
Tableau Bridge is now availble on Linux Containers. Yay! Now what does this mean and how do I build and run Linux Containers? We will discuss the advantages of running Bridge on Linux Containers the steps to build them, and finally, we will provide some automation script ideas for monitoring and scaling Linux Bridge agents. Tableau Bridge Today Until recently, Tableau Bridge was only available as a Windows application running on a Windows VM. It supported only one bridge agent per Virtual or Physical Machine. Advantages of Bridge in Containers Better Hardware Utilization: Linux containers are more efficient than Windows VMs, requiring only about 1/50th of the disk space. Ability to Spin Up Multiple Bridge Agents: With Linux Containers, it becomes easier to spin up multiple bridge agents on a single machine, improving scalability and resource utilization. Infrastructure Automation: Linux Containers enable easier automation of provisioning bridge agents and upgrading Tableau Bridge, the
Read more

Outlook tip: Turn off Email Contact Pictures

-
Image
  Many people find the photos in the window border to be a little distracting. It is easy to turn them off by adding a registry key.  Follow these simple steps: 1) Save the text below between the lines into a text file and rename the file “dontShowContactPicture.reg”. ------ Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Options\Mail] "ShowContactPicture"=dword:00000000 ------ 2) Double click the file and you will be prompted: 3) Restart Outlook. 4) See the result: Before: After: 5) To undo this change and turn pictures back on, simply edit the file and change “dword:00000000” to “dword:00000001”   More information can be found in this related article on stackoverflow.com
Read more